• Matt Menke's avatar
    Rework TransportSecurityPersister's data format. · 911e448d
    Matt Menke authored
    In particular, separate out the HSTS and ExpectCT data tables
    (addressing an old TODO) and switch from a dictionary of dictionaries
    to a list of dictionaries, so that ExpectCT entries can be keyed on
    NetworkIsolationKey in addition to domain hash in a followup CL.
    
    The current plan is not to partition HSTS information by
    NetworkIsolationKey, but this CL also switches it to using a list, to
    be similar to the ExpectCT table.
    
    This CL also adds a version number to the saved data format, and adds
    an empty NetworkIsolationKey field to ExpectCT entries, so that entries
    won't be lost when that field is added (though entries may be lost
    when switching from an empty NIK to actually applying NIKs, which is
    an issue for another day).
    
    Bug: 969893
    Change-Id: If723386b7ebc447ae78cb393b6b9d6719441759d
    Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2216040
    Commit-Queue: Matt Menke <mmenke@chromium.org>
    Reviewed-by: default avatarNick Harper <nharper@chromium.org>
    Reviewed-by: default avatarEmily Stark <estark@chromium.org>
    Cr-Commit-Position: refs/heads/master@{#772952}
    911e448d
transport_security_persister.cc 19.8 KB